|
1
|
# MSN (Micosoft Network) Messenger file transfers (MSNFTP and MSNSLP)
|
|
2
|
# Pattern attributes: good fast fast
|
|
3
|
# Protocol groups: chat document_retrieval proprietary
|
|
4
|
# Wiki: http://www.protocolinfo.org/wiki/MSN_Messenger
|
|
5
|
# Copyright (C) 2008 Matthew Strait, Ethan Sommer; See ../LICENSE
|
|
6
|
#
|
|
7
|
# http://www.hypothetic.org/docs/msn/client/file_transfer.php
|
|
8
|
|
|
9
|
# NOTE! This pattern does not catch the modern type of MSN filetransfers
|
|
10
|
# because they use the same TCP connection as the chat itself. See
|
|
11
|
# ../example_traffic/msn_chat_and_file_transfer.txt for a demonstration.
|
|
12
|
|
|
13
|
# This pattern has been tested and seems to work well. It, does,
|
|
14
|
# however, require more testing with various versions of the official
|
|
15
|
# MSN client as well as with clones such as Trillian, Miranda, Gaim,
|
|
16
|
# etc. If you are using a MSN clone and this pattern DOES work for you,
|
|
17
|
# please, also let us know.
|
|
18
|
|
|
19
|
# First part matches the older MSNFTP: A MSN filetransfer is a normal
|
|
20
|
# MSN connection except that the protocol is MSNFTP. Some clients
|
|
21
|
# (especially Trillian) send other protocol versions besides MSNFTP
|
|
22
|
# which should be matched by the [ -~]*.
|
|
23
|
|
|
24
|
# Second part matches newer MSNSLP:
|
|
25
|
# http://msnpiki.msnfanatic.com/index.php/MSNC:MSNSLP
|
|
26
|
# This part is untested.
|
|
27
|
|
|
28
|
msn-filetransfer
|
|
29
|
^(ver [ -~]*msnftp\x0d\x0aver msnftp\x0d\x0ausr|method msnmsgr:)
|
|
30
|
|